Supply Chain Incidents

MAL-2026-4809

Malicious code in baidubsrc (PyPI)

docontrol-mcp

MAL-2026-4811

Malicious code in docontrol-mcp (PyPI)

binproto

MAL-2026-4810

Malicious code in binproto (PyPI)

web3.prc

MAL-2026-4801

Malicious code in web3.prc (npm)

int-node

MAL-2026-4797

Malicious code in int-node (npm)

web3-prices

MAL-2026-4800

Malicious code in web3-prices (npm)

@fhkry/baileys

MAL-2026-4803

Malicious code in @fhkry/baileys (npm)

shop-minis

MAL-2026-4807

Malicious code in shop-minis (npm)

jsonlogbundler

MAL-2026-4798

Malicious code in jsonlogbundler (npm)

fastjsonlog

MAL-2026-4796

Malicious code in fastjsonlog (npm)

xlsx-enhanced

MAL-2026-4802

Malicious code in xlsx-enhanced (npm)

pdf-lib-enhanced

MAL-2026-4799

Malicious code in pdf-lib-enhanced (npm)

m-at-star-tools

MAL-2026-4812

Malicious code in m-at-star-tools (PyPI)

shizukyu

MAL-2026-4806

Malicious code in shizukyu (npm)

@leviyuan/lodestar

MAL-2026-4804

Malicious code in @leviyuan/lodestar (npm)

wm-idp-sdk

MAL-2026-4808

Malicious code in wm-idp-sdk (npm)

noteparse

MAL-2026-4813

Malicious code in noteparse (PyPI)

massive

MAL-2026-4795

Malicious code in massive (PyPI)

makecoder

MAL-2026-4790

Malicious code in makecoder (npm)

ggk-happy

MAL-2026-4789

Malicious code in ggk-happy (npm)

Typosquat

react-json-chalk

MAL-2026-4792

Malicious code in react-json-chalk (npm)

indextts-cli

MAL-2026-4794

Malicious code in indextts-cli (PyPI)

react-cleaner

MAL-2026-4791

Malicious code in react-cleaner (npm)

vxui-react

MAL-2026-4793

Malicious code in vxui-react (npm)